CVE-2014-9140

CVE-2014-9140 describes a buffer overflow vulnerability in the ppp_hdlc function of tcpdump versions 4.6.2 and earlier, affecting products like Red Hat tcpdump. An unauthenticated remote attacker can exploit this flaw by sending a specially crafted PPP packet, leading to a denial of service (crash) of the tcpdump application. While the CVSS score is 5.0 (medium severity) with low attack complexity, indicating a potential impact of only partial availability, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.